Analysis
-
max time kernel
140s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
10/07/2024, 08:23
General
-
Target
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe
-
Size
34KB
-
MD5
30307b00be237bf18d80f68dc26cb659
-
SHA1
f1bb4b4d82d9bd37455326d0e68c8907ed852107
-
SHA256
62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41
-
SHA512
a123fc5f3dc4cbe4d3f727e8c6ae54a99cc07660519e21aa7205df7b4e666129883526f4a981388c771bf6b7cca2596bc319993bbaecb79f599e5513b8cc49ba
-
SSDEEP
768:EqBXsYbaKzHsEcX/55DcLKhClYWvo2XP+/rp750:EqBXsYbTHsEcv55ILkCbv9O90
Score
7/10
Malware Config
Signatures
-
UPX packed file 2 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe"C:\Users\Admin\AppData\Local\Temp\62e8d9aa8c44dbbc14b15e4a1d2c652d2d2f65f00bae6c77221ae6a4a686ee41.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
100KB
-
Filesize
100KB